43a1fde39f6d1a83c1d1444e883d8d20_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

43a1fde39f6d1a83c1d1444e883d8d20_JaffaCakes118
Size

99KB
MD5

43a1fde39f6d1a83c1d1444e883d8d20
SHA1

3daa162dc4265815c9c42ac8de992c8a93fc774b
SHA256

70888da4553dc55004860fdd1b42ba6bfdf30047de503a44881466bacb401948
SHA512

9365041e489505af6d2f2e9b8ae31170222e2b313dff6146997c09b48cc389d63f1ac78697e83ee2a5dc56090b56e5d4b408f50352a2487fb2e3feb9755c315a
SSDEEP

1536:sd7FArQS0efzL3ZVlDk+/XPz2JIr1dT948SBPj5HB82j1X9CIquPCwPcu+Q:sd8eUzLpVlDkkr2JIPRK5hjTPCwPc9Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
43a1fde39f6d1a83c1d1444e883d8d20_JaffaCakes118

Files

43a1fde39f6d1a83c1d1444e883d8d20_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f846f6890639cab4b7c4da3f53547562

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AddVectoredExceptionHandler
ReadConsoleOutputCharacterW
BaseInitAppcompatCacheSupport
DnsHostnameToComputerNameW
MoveFileExA
CompareStringW
GetDiskFreeSpaceExA
EnumCalendarInfoExA
GlobalAlloc
SetVolumeLabelW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 84KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE